Your extensions ring, then delayed ring to other sets using VE. You say the call goes to InMail to quickly after the overflow. That would be the delayed call forwarding timer I think.